Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
File:                     15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json)
Hash identifier:          cBH3GrGhNqmCOA2f/8Pxzx45exQt8h5HkAr1KHbsMQ8=
Subject key identifier:   11:B4:B7:CA:1B:1B:28:3F:D9:D5:E8:FC:94:1D:4D:40:84:00:99:D7
Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Certificate issuer:       /CN=d795a7259f9537186493f482d55cef4b64b1c435
Certificate serial:       019F8F7EFB0253082EED4F7A445E86DB600B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
Manifest number:          11CA
Signing time:             Thu 23 Jul 2026 15:01:31 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:31 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:31 +0000
Files and hashes:         1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: i41VlgbiLzYuA39KITQmBBYGbJ9AFVikkaorlOf294o=)
                          2: i76W5DkDxFqXL1U4LEioLLQPWHE.roa (hash: wjKq780qwNn7oCMWX/g2VF2AWfHDNkvvk88MaGruKxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:fb:02:53:08:2e:ed:4f:7a:44:5e:86:db:60:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435
        Validity
            Not Before: Jul 23 15:01:31 2026 GMT
            Not After : Jul 24 15:01:31 2026 GMT
        Subject: CN=11b4b7ca1b1b283fd9d5e8fc941d4d40840099d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a1:c3:a8:4d:fd:7d:54:89:8a:59:d0:b7:a3:
                    90:ee:3d:ac:b4:11:8f:7f:d2:9d:81:15:3b:ec:4e:
                    54:3d:c7:18:a1:49:73:70:4e:ea:d7:0c:ff:27:49:
                    fc:94:63:ab:7c:0c:d4:3a:e6:1e:26:d6:de:db:15:
                    31:7f:99:54:55:78:63:70:fb:2b:9f:7c:67:3e:f9:
                    95:ef:d6:92:ba:a0:d8:f4:5b:8a:9c:9d:f3:02:0b:
                    0a:72:d8:61:44:c0:42:93:bc:92:39:06:77:c5:b8:
                    77:13:93:24:e3:f3:92:07:2c:bc:90:48:db:1e:bd:
                    99:30:47:27:89:e1:bb:e9:1c:0c:0f:3a:61:d8:b1:
                    df:05:47:f8:e8:82:d7:41:66:dd:4e:76:3a:bf:5c:
                    d2:dc:1e:45:e5:2a:72:1e:48:b1:40:0c:bd:22:d9:
                    f1:7c:66:c7:34:54:d9:c5:61:8f:80:0a:4c:56:90:
                    ba:55:11:01:60:d6:1c:ed:e3:8a:db:ce:5b:b2:78:
                    8a:8a:29:80:33:83:40:11:d8:58:f4:3a:e6:60:2d:
                    2f:3d:de:15:54:db:e1:70:82:28:48:f5:81:f1:e7:
                    36:2f:4d:b9:01:c4:4d:09:a5:9e:50:6f:6e:4a:d5:
                    9c:e4:60:f4:9b:e1:6d:3d:3b:a6:a9:74:cd:e9:0b:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B4:B7:CA:1B:1B:28:3F:D9:D5:E8:FC:94:1D:4D:40:84:00:99:D7
            X509v3 Authority Key Identifier:
                keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:73:66:3e:21:d3:19:85:1b:b7:d9:02:67:f6:92:5e:d7:c4:
         5d:97:16:9b:84:68:62:24:c1:b7:24:ba:4a:fa:c5:cc:66:83:
         57:15:99:4b:57:b4:ff:0d:9f:69:6a:fa:ea:c1:b7:99:30:d0:
         e6:32:11:22:27:45:53:52:54:e9:d8:25:bf:ff:e7:ff:2a:75:
         d9:b2:bb:d4:fb:7e:b6:6f:00:86:10:89:64:52:34:27:a5:6a:
         cb:1b:ec:3c:50:8d:54:30:57:2b:a4:56:4a:ed:e0:b9:35:98:
         c3:c7:fa:17:e5:7f:eb:aa:fb:2d:89:58:9d:19:9a:74:ba:df:
         28:43:2c:67:9b:45:4f:d9:87:22:d3:fa:22:f6:6a:7d:65:68:
         26:f9:b9:03:22:ee:47:2d:85:fe:fc:7b:7e:6d:36:4d:3e:95:
         94:3e:ef:3d:8f:6c:0d:c4:0e:e8:93:fd:6d:ea:ab:a5:6c:85:
         75:2e:7c:49:4f:fd:b9:d4:de:1b:b7:d7:44:39:17:8b:bb:d8:
         c5:6f:5b:1f:5c:e5:5b:d8:9a:71:79:da:2f:78:76:12:aa:82:
         71:6a:ed:2e:b5:1f:93:77:51:81:99:a3:4a:4b:82:32:59:b4:
         45:4a:8c:7b:fb:1c:3a:a5:b2:da:29:03:0d:61:7d:06:62:6e:
         21:af:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:24 2026 by rpki-client